Privacy notice
This notice explains what Bloom Education does with the personal data you give us through the enquiry form on this website, and what rights you have over it. It is written to meet the UK GDPR and the Data Protection Act 2018.
Who is responsible for your data
The data controller is Bloom Education LLC, a limited liability company registered in the State of Colorado, United States, entity number 20261445208.
Registered office: 1500 N Grant Street, Suite R, Denver, CO 80203, United States.
Bloom has no UK establishment. The team that reads and acts on your enquiry operates from Blantyre, Malawi.
You can contact us about anything in this notice at contact@bloomeducationonline.com.
What we collect through the enquiry form
We only collect what the form actually asks for, plus a small amount of technical information needed to keep the form working and free of abuse.
| You give us | Your name, your email address, and your phone or WhatsApp number if you choose to provide one. |
|---|---|
| About the student | Year group, subject, exam board, current grade, target grade, when the support is needed by, and anything you write in the message box. |
| Your consent | The date and time you ticked the consent box. |
| Where you came from | The page you sent the enquiry from, and any campaign tags (utm_source, utm_medium, utm_campaign) in the link you followed. |
| Technical | A one-way cryptographic hash of your IP address, and the date and time of the enquiry. We do not store your IP address itself, the hash cannot be reversed back into it. It exists only so we can stop the same source flooding the form. |
| Cookies | One strictly necessary session cookie. It exists to protect the form against cross-site request forgery. We do not use advertising or analytics cookies on this site. |
Please do not send us medical, health or diagnosis details through this form. If such information is relevant to the student's tutoring, we will discuss it with you directly and agree how it should be handled.
Why we use it, and our lawful basis
- To reply to your enquiry and arrange an assessment lesson: our lawful basis is your consent, given when you tick the box on the form. You can withdraw it at any time (see below).
- To keep the form secure and prevent abuse: our lawful basis is legitimate interests: keeping the enquiry form usable for genuine visitors. This is the only reason we hold the hashed IP address.
We do not sell your data, and we do not use it for automated decision-making or profiling.
Who else can see it
Your enquiry is stored on our own server and is visible to the Bloom team handling admissions. It is also processed by the following service providers, acting on our instructions:
- Hostinger: hosts the website, the database your enquiry is stored in, and the email service that sends your confirmation.
That is the complete list. We do not share your enquiry with any other company, and we never sell it.
Where your data is processed
We are saying this plainly rather than burying it: your data is transferred outside the United Kingdom. Bloom Education LLC is registered in the United States, and the team who read and act on your enquiry are in Malawi. Our email provider operates within the EEA, and our hosting provider stores data in its own server region.
Where data leaves the UK it must be protected by an approved safeguard, such as UK adequacy regulations, or the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses) together with a transfer risk assessment.
Neither the United States nor Malawi is covered by UK adequacy regulations. If you would like details of the safeguards that apply to your data before you send us anything, email contact@bloomeducationonline.com and we will tell you.
How long we keep it
We keep enquiry details for 24 months from our last contact with you. If you become a customer, we keep your details for as long as we are providing tutoring and for 24 months after it ends.
When that period ends, we delete the enquiry or irreversibly anonymise it. You can ask us to delete it sooner at any time.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to erase your data;
- ask us to restrict how we use it;
- object to processing we carry out on the basis of legitimate interests;
- ask us to transfer your data to you or another provider in a portable format;
- withdraw your consent at any time; this does not affect anything we did before you withdrew it.
To exercise any of these, email contact@bloomeducationonline.com, quoting your enquiry reference if you have one. We will respond within one month. There is no charge.
If you are unhappy with how we handle your data
Please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at any time.
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Children's data
Our enquiry form is intended to be completed by a parent or guardian, or by a student aged 13 or over. The information about the student is provided by the person filling in the form. If you believe a child has given us data without appropriate consent, contact us and we will delete it.
Changes to this notice
If we change how we use your data we will update this page and change the date at the top of it.